Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa
File:                     6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa (raw, json)
Hash identifier:          xrpnAiaEh1lR4wZuKJqYzHeaum2j+XCyuPN/vY+zm80=
Subject key identifier:   5D:D2:39:AA:E4:38:58:36:98:7F:5D:36:1E:FC:57:76:1E:9C:4A:66
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       24D936B3D1B35A9AD3DC9F5F4BF5E14D3431883E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa
Signing time:             Sat 08 Aug 2026 00:50:47 +0000
ROA not before:           Sat 08 Aug 2026 00:50:47 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d9:36:b3:d1:b3:5a:9a:d3:dc:9f:5f:4b:f5:e1:4d:34:31:88:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  8 00:50:47 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=fb023f92487cb67fd62d15eab96fc6b8ea7f20266bad8df79fd32c790fb8b71d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:ec:40:4f:2f:62:a1:2f:ee:e6:c5:d0:bd:
                    db:e9:97:2d:e2:3e:85:ac:82:ed:2c:36:ee:7c:94:
                    68:9b:2e:7b:0d:43:58:7c:9e:4d:d9:13:09:77:af:
                    cc:c0:1c:45:d2:99:19:e3:43:48:d5:bd:6e:b4:3c:
                    2e:4f:32:85:8d:b3:dc:f7:d1:88:a9:9b:0b:28:27:
                    2c:e7:b0:b8:af:d1:45:39:e5:dc:22:a5:b6:f8:49:
                    72:63:03:02:f8:31:cd:b4:fb:4a:cc:ab:bd:7b:9f:
                    93:de:ee:45:eb:f8:2a:0f:81:02:12:b2:79:3f:6d:
                    e8:7d:16:f9:cf:35:4f:46:85:1c:1e:a5:e0:35:d1:
                    92:ab:b2:c9:71:74:64:56:3f:d7:66:38:fe:16:b7:
                    c6:08:0c:b0:db:5d:b1:c4:49:82:11:95:88:43:e0:
                    1b:17:dc:56:37:a9:bf:28:ef:f0:a1:5d:f9:92:e6:
                    50:51:8f:0d:e7:d0:73:97:52:18:f1:a3:c6:88:4f:
                    00:91:45:c7:3d:0f:f9:f2:2c:94:f7:cc:44:03:60:
                    ef:4a:bb:90:1a:04:5e:0b:fd:1a:f0:85:80:c7:58:
                    85:58:a9:49:94:37:ab:2f:f7:89:94:d2:4d:44:25:
                    d4:4f:91:c7:04:89:3c:86:cb:39:20:8b:e0:1b:51:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D2:39:AA:E4:38:58:36:98:7F:5D:36:1E:FC:57:76:1E:9C:4A:66
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f105::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:e6:b8:b7:b2:d4:82:8e:5f:b4:ae:fa:15:7d:1a:24:b4:
         1e:bc:47:d0:27:12:b5:df:24:3f:3f:3a:30:19:77:c0:ce:44:
         ca:2f:1d:50:8a:eb:d2:49:10:34:42:e6:d9:9f:93:e0:a5:cb:
         d2:1b:44:77:60:f0:58:2b:c1:a3:6f:c9:c8:c7:1a:53:22:88:
         08:48:38:22:d5:3c:fe:69:94:b8:e5:61:83:8e:16:82:fb:22:
         ea:8d:94:ea:66:e5:a1:81:88:1d:db:83:01:c3:95:19:c1:cb:
         5a:10:e6:b0:2b:44:2b:02:2a:09:f7:a4:0b:d3:e8:e7:62:14:
         5b:02:27:57:c5:62:bc:4d:b2:2f:db:bd:25:84:f3:3b:82:56:
         85:23:30:08:f4:45:9c:f1:da:37:4a:c1:b2:a4:22:51:8b:34:
         34:c2:e7:2e:e9:2c:23:78:77:b1:a1:03:64:fa:80:24:3e:1d:
         4f:25:11:75:07:a2:e7:98:62:e0:e2:fe:b0:dd:db:2a:32:57:
         1b:d6:60:34:66:fc:7a:1a:bf:27:e1:ef:79:aa:15:00:97:48:
         cf:1e:43:6c:9c:96:21:1b:e3:7f:0e:90:c9:3c:51:c8:b2:00:
         f6:33:f8:3b:64:a2:b3:47:ef:00:ad:b5:29:cc:0d:3f:1a:e6:
         f4:3b:c6:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:15:39 2026 by rpki-client